flutter-desktop-config
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external project files, which serves as a potential vector for instructions embedded in data to influence agent behavior.
- Ingestion points: Files within the user-specified
projectPathare accessed viaRead,Glob, andGreptools as defined inSKILL.md. - Boundary markers: The skill instructions do not specify delimiters or constraints to prevent the agent from following instructions found within the project's source code or configuration files.
- Capability inventory: The skill is granted
Write,Edit, andBashtool access, which allows for file modification and command execution based on the processed project context. - Sanitization: No explicit sanitization or validation logic is defined to filter out or ignore instruction-like content read from the local project files.
Audit Metadata